Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/666d2b12-3e4d-3e9a-9e73-88791a6a98c9.roa
File:                     666d2b12-3e4d-3e9a-9e73-88791a6a98c9.roa (raw, json)
Hash identifier:          V+SuSOuiTOBQPNzm9SX6MCaNMJeItFuQEpLHmeg6EnY=
Subject key identifier:   F7:01:DD:EB:F7:58:7C:33:B2:D1:0E:93:6B:2D:3F:09:27:A2:82:AA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845C178D510F8E6F2C814356000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/666d2b12-3e4d-3e9a-9e73-88791a6a98c9.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        2607:8940:2220::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:d5:10:f8:e6:f2:c8:14:35:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=e426d74c-ce55-42b9-9fa7-990887c8505c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:d4:c9:72:82:8c:b1:5f:cc:7a:29:ab:eb:
                    e6:b3:82:a0:be:37:c1:85:91:94:07:6d:5b:54:3b:
                    cc:57:21:01:2d:8b:74:92:21:92:02:77:01:1e:2f:
                    ad:5b:b5:43:cc:a9:ea:c8:20:d4:04:a1:d0:f7:4d:
                    bc:db:31:d4:c4:2d:f5:d9:cd:b0:ce:3f:91:f5:a5:
                    68:ef:f0:9a:47:ea:7a:76:2e:8e:c1:0e:fd:60:60:
                    89:cd:b6:c1:a6:b8:96:2c:1e:ef:3d:78:b1:b7:a8:
                    ac:d4:06:9d:8e:64:3d:46:50:c8:02:b3:42:cb:df:
                    83:7f:df:e7:29:5e:5f:46:d3:70:9f:27:27:09:02:
                    0c:8d:20:42:13:1a:11:5c:96:e6:7e:68:8d:bb:6a:
                    64:c2:9a:31:d7:89:58:f2:2f:0c:96:6b:11:94:15:
                    f7:91:5c:a2:8a:7f:c4:0b:5b:7d:d8:d7:93:ea:54:
                    d5:31:8d:cf:ce:26:54:22:7d:42:bd:45:7f:14:61:
                    64:b5:a0:f9:f8:11:70:4a:3a:46:30:e6:61:bd:13:
                    44:c5:82:c3:0f:f5:8b:5d:f5:c0:b7:eb:ad:e5:25:
                    ef:e4:58:2f:e9:11:ec:09:5b:b7:44:d5:a6:ab:17:
                    f9:cc:b4:39:e8:d2:9a:78:f8:bc:1b:6d:39:c0:cd:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:01:DD:EB:F7:58:7C:33:B2:D1:0E:93:6B:2D:3F:09:27:A2:82:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/666d2b12-3e4d-3e9a-9e73-88791a6a98c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2220::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d3:09:4f:f0:f7:44:bf:fe:07:06:c8:c6:fb:5c:52:ff:2f:
         49:24:47:3f:0e:29:87:86:51:c7:6b:9e:34:2e:f9:fa:bc:36:
         84:4a:6a:67:47:b4:9d:ca:7e:00:cb:e8:95:2f:47:e0:4c:ad:
         5f:75:47:11:35:85:ed:e7:9b:3b:52:b1:a2:35:bb:17:d5:a2:
         44:00:7e:ad:51:a4:4c:b1:00:16:b2:70:62:48:fa:e5:23:de:
         54:e5:49:6d:97:a8:9f:52:e1:cb:bf:02:63:4e:ec:ed:ed:20:
         df:4b:6c:67:25:cb:e8:95:3d:09:50:ff:2e:6c:e2:74:af:02:
         a7:31:30:48:9d:cf:03:cc:e0:ca:11:ff:33:e8:4f:6d:99:31:
         f2:5a:04:27:36:77:a2:07:e4:d1:aa:51:21:46:51:cb:d9:b7:
         19:7e:51:f8:96:7b:f7:7b:22:d3:98:43:4b:0f:39:ef:19:3c:
         81:b6:8b:f3:a4:d4:a4:e6:0f:4b:9b:fc:33:c1:96:83:b1:11:
         a9:b7:7c:ff:01:89:90:14:c0:55:1a:95:32:37:b1:46:36:ec:
         50:05:73:e2:ff:21:fd:f2:fe:1d:87:da:fb:6d:58:aa:ab:c4:
         da:06:20:95:4f:17:39:2f:a7:ae:5d:c2:bb:41:d4:19:ef:b5:
         24:07:d8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:56:47 2024 by rpki-client on console-ams.rpki-client.org